Cross browser scripting. I believe is what you call it. See the {GET} some people don't setup there webservers right so you can execute commands, and **** from a web browser. There are alot of Tutorials on it. One good piece of advise for webservers is change the C:/ letter to like f:\ or somthin that way stupid scripts like that won't work.